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CLAIMS 

AH pending claims are listed below. 

1 . (Original) A method for facilitating integrity of an assembly employable 
by application programs diiring runtime, comprising the steps of: 

providing an assembly with a manifest that contains a list of modules that 
make up the assembly; and 

providing the manifest with a hash of the contents of at least one module 
of the list of modules. 



2. (Original) The method of claim 1, the step of providing the rnanifest with 
a hash of the contents of at least one module of the list of modules comprising the step of 
providing the manifest with a hash of each module of the list of modules that constitutes 
the assembly. 

3. (Origuial) The method of claim I, further comprising the step of pi'oviding 
identity information in the manifest of tlie assembly. 

4. (Original) The method of claim 3, the identity information comprising 
publisher information and version infoimation. 

5. (Original) The method of claim 1, further comprising the step of providing 
a hash of the contents of the assembly at the end of the assembly, 

6. (([XiiTently Amended) Tlie method of claim 1 , further comprising the step 
of determining if the contents of the assembly has have been modified by determining an 
actual hash of the contents of the at least one modiile of the list of modules and 
comparing the actual hash with the hash of the contents of the at least one module of the 
Hst of modules residing hi the manifest of the assembly. 
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7. (Original) The method of claim 6, further comprising the step of 
determining if the publisher of the assembly is tmstworthy if the assembly has been 
modified. 

8. (Original) The method of claim 7, the step of determining if the publisher 
of the assembly is trustworthy if the assembly has been modified comprising the step of 
checking version information and publisher name information residing in the manifest of 
the assembly, 

9. (Original) The method of claim I, further comprising the step of providing 
the manifest with a hash of a manifest of at least one other assembly that the assembly 
depends on. 

1 0. (Original) A method for facilitating integrity of assembhes employable by 
application programs during runtime, comprising the steps of: 

providing an assembly with a manifest that contains a hst of referenced 
assemblies that the assembly depends on; and 

providing the manifest with a hash of a manifest of at least one referenced 
assembly of the list of referenced assemblies. 

1 1 . (Original) The method of claim 1 0» the step of providing the manifest with 
a hash of a manifest of at least one referenced assembly of tlie hst of referenced 
assembhes comprising the steps of providing the manifest with a hash of each referenced 
assembly of the list of referenced assembhes. 

12. (Original) The method of claim 10, further comprising the step of 
providing identity information in the manifest of the assembly. 

13. (Original) The method of claun 12, the identity information comprising 
publisher information and version information. 
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14. (Origujal) The method of claim 10, further corjiprising the step of 
providing a hash of the contents of the assembly at the end of the assembly. 

15. (Currently Amended) The method of claim 10, further comprising the step 
of determining if the contents of the at least one referenced assembly has have been 
modified by determining an actual hash of the contents of the at least one referenced 
assembly of the list of referenced assemblies and comparing the actual hash with the hash 
of the contents of the at least one referenced assembly of the list of referenced assemblies 
residing in the maoifest of the assembly. 

16. (OriginaJ) The method of claim 15, further comprising the step of 
deterrnining if the publisher of the at least one referenced assembly is trustworthy if the at 
least one referenced assembly has been modified. 

17. (Original) The method of claim 1 6, the step of determining if the publisher 
of the at least one referenced assembly is trustworthy if the at least one referenced 
assembly has been modified comprising the step of checking version information and 
publisher name information residing in a manifest of the at least one referenced assembly. 

18. (Previously Amended) A computer readable medium having at least one 
computer executable component employable by an application program at rmitime 
comprising; 

an assembly including a manifest that contains a hst of modules that make up the 
assembly and a hash of the contents of at least one module of the Hst of modules. 

1 9. (Original) The computer readable medium of claim 1 8, the manifest 
including a list of at least one referenced assembly and a hash of a manifest of the at least 
one referenced assembly. 
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20. (Original) The computer readable medium of claim 19, the manifest 
including identity information and version information. 

21 . (Original) The computer readable medium of claim 19, the assembly being 
a dynamically linked library, 

22. (Original) A computer readable medium having at least one computer 
executable component employable by an application program at runtime comprising: 

an assembly including a manifest that contains a list of at least one referenced 
assembly that the assembly references and a hash of the contents of a manifest of the at 
least one referenced assembly. 

23. (Original) A system for facihtating integrity of assemblies employable by 
application programs at runtime, the system comprising: 

a first component adapted to provide a manifest for an assembly, the manifest 
having a list of modules making up the assembly; and 

a second component adapted to provide the manifest with a hash of at least one 
module of the hst of modules. 

24. (Currently Amended) The system of claim 23, furtlier comprising a third 
component adapted to compare the hash of ^ said at least one module with an actual 
hash value of the at least one module. 

25. (Original) The system of claim 24, the manifest including identity and 
version information and the third component adapted to determine if the assembly should 
be executed based on a review of the originator and version information, if the hash of 
the at least one module in the manifest and the actual hash value of the at least one 
module are different. 
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26. (Original) The systan of claim 23, further comprising a binding 
component adapted to provide binding policy information for determining a version of an 
assembly that an application program will run if another assembly having the same name 
resides on the system. 

27. (Previously Amended) A system for facilitating integrity of assemblies 
employable by application programs at runtime, the system comprising: 

a first component adapted to provide a manifest for an assembly, the manifest 
having at least one referenced assembly, the at least one referenced assembly comprising 
a manifest; and 

a second component adapted to provide the manifest with a hash of the manifest 
of the at least one referenced assembly, 

28. (Original) The system of claim 27, further comprising a third component 
adapted to compare the hash of the at least one referenced assembly in the manifest with 
an actual hash value of the at least one referenced assembly. 

29. (Original) The system of claim 27, further comprising a binding 
component adapted to provide the third component with binding poHcy information. 

30. (Previously Amended) A system for facilitating integrity of an assembly 
employable by application programs at runtime, the system comprising: 

means for relating a manifest having a list of at least one related assembly to an 
assembly, the at least one related assembly comprising a manifest; and 

means for providing the manifest with a hash of the manifest of the at least one 
related assembly. 

31. (Original) The system of claim 30, the at least one related assembly being 
a module. 
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32. (Original) The system of claim 30, the at least one related assembly being 
a referenced assembly. 

33. (Original) The system of claim 30, further comprising means for 
comparing a hash value of the at least one related assembly in the manifest to an actual 
hash value of the at least one related assembly. 

34. (Original) The system of claim 30, further comprising means for 
establishing a binding policy. 

35. (Original) The system of claim 30, at least one of the assembly and the at 
least one related assembly being a dynamically linked library. 
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